Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa
File:                     34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa (raw, json)
Hash identifier:          76qOIWMPyaXzGG+gNnPx2Fyn5yrcWu0uHWvofc9dCco=
Subject key identifier:   9E:08:83:84:58:08:52:68:F7:C4:8C:BF:EF:E9:19:57:6E:0C:12:24
Certificate issuer:       /CN=491A075DC3235FD997380BAEC38A01043C84379B
Certificate serial:       04A2A62387FD23859D72BBFC757BDEC8C24C3A8D
Authority key identifier: 49:1A:07:5D:C3:23:5F:D9:97:38:0B:AE:C3:8A:01:04:3C:84:37:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/491A075DC3235FD997380BAEC38A01043C84379B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa
Signing time:             Tue 31 Oct 2023 17:59:34 +0000
ROA not before:           Tue 31 Oct 2023 17:54:34 +0000
ROA not after:            Tue 29 Oct 2024 17:59:34 +0000
asID:                     268737
IP address blocks:        45.171.252.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a2:a6:23:87:fd:23:85:9d:72:bb:fc:75:7b:de:c8:c2:4c:3a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491A075DC3235FD997380BAEC38A01043C84379B
        Validity
            Not Before: Oct 31 17:54:34 2023 GMT
            Not After : Oct 29 17:59:34 2024 GMT
        Subject: CN=9E08838458085268F7C48CBFEFE919576E0C1224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:93:d5:b1:3b:90:9b:c6:d7:fd:e5:eb:b6:
                    9e:ca:73:cd:f0:11:fd:b1:f9:fe:b4:cb:72:3a:f4:
                    21:2f:95:a2:4e:c7:c6:dc:b3:03:cf:15:0e:93:5e:
                    9a:5f:fe:bc:77:58:42:7f:88:5e:4a:21:8b:c7:99:
                    34:e2:f3:ac:f4:2b:21:b6:54:34:9a:83:db:70:f5:
                    60:57:a4:9e:57:a4:5b:09:36:48:d8:95:0e:f8:71:
                    a2:60:e6:2a:8a:ed:b2:8a:14:a9:91:23:92:53:df:
                    3a:f3:e1:20:29:22:17:8c:a1:02:37:e6:c2:04:27:
                    56:38:3e:3c:40:d8:d8:df:86:86:9b:e3:7e:7c:92:
                    64:42:cf:65:f2:28:06:0e:af:4e:5f:ba:26:03:4d:
                    69:92:e8:43:bb:c0:54:19:da:6e:45:39:3e:c1:45:
                    f8:60:ad:1b:34:6f:48:e5:4a:91:65:3b:3e:aa:d2:
                    f2:69:4e:d8:04:5c:36:fd:c9:95:aa:01:d2:c2:83:
                    86:b6:e3:3b:c9:ef:a3:29:d0:79:af:c7:31:6c:50:
                    34:f7:00:79:94:01:08:7e:44:35:25:3b:3d:df:ae:
                    0f:48:d5:6c:37:98:de:53:78:dd:46:0d:18:0a:8d:
                    82:66:57:50:e0:ff:74:a2:d3:88:34:42:25:59:a6:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:08:83:84:58:08:52:68:F7:C4:8C:BF:EF:E9:19:57:6E:0C:12:24
            X509v3 Authority Key Identifier:
                keyid:49:1A:07:5D:C3:23:5F:D9:97:38:0B:AE:C3:8A:01:04:3C:84:37:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/491A075DC3235FD997380BAEC38A01043C84379B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/491A075DC3235FD997380BAEC38A01043C84379B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:64:30:88:57:24:26:6b:4d:d8:3c:17:e1:a0:5b:47:9e:24:
         d5:c1:bf:08:3f:2a:78:5d:3e:cd:a3:16:c6:82:02:c4:37:f8:
         3f:0b:d0:04:aa:9e:13:49:05:03:ea:b9:99:06:22:22:83:1c:
         46:0a:0c:e8:11:63:48:eb:02:f1:1d:2b:87:b1:43:af:c3:d7:
         d0:2d:93:12:76:8f:18:9c:d2:95:7b:75:19:4a:b0:a9:b7:39:
         17:ca:4e:31:00:5e:64:43:fc:03:1f:1c:a1:af:eb:f1:b7:77:
         5a:bf:cb:98:b9:07:5e:36:b0:c6:71:3c:6c:a4:8b:c6:bb:8b:
         a8:bc:08:6e:6f:ab:b1:f2:e6:b8:4c:c4:b2:18:60:95:40:dc:
         31:6e:da:3e:bf:9d:26:da:f0:83:5e:21:c0:5e:27:70:20:06:
         86:aa:5b:35:e1:3b:0c:0d:ae:8e:ce:11:cc:78:ec:13:be:8d:
         ad:92:9c:9e:4c:d6:f7:5d:36:3a:ca:17:a8:27:d2:91:06:bb:
         ea:f0:e8:d8:60:79:94:c1:03:cc:f8:88:b0:02:b2:2c:9b:64:
         dc:82:db:67:3f:30:30:19:b9:50:27:2d:24:65:2b:e1:41:1c:
         3c:62:7a:a7:98:f7:5b:d1:ec:27:a1:2b:f6:f4:ad:d8:63:ce:
         ee:28:6a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org